It was discovered that Python inefficiently handled expanding system environment variables. An attacker could possibly use this issue to cause Python to consume excessive resources, leading to a denial of service. (CVE-2025-6075)
Caleb Brown discovered that Python incorrectly handled the ZIP64 End of Central Directory (EOCD) Locator record offset value. An attacker could possibly use this issue to obfuscate malicious content. (CVE-2025-8291)
3.10.12-1~22.04.123.12.3-1ubuntu0.93.4.3-1ubuntu1~14.04.7+esm173.5.2-2ubuntu0~16.04.4~14.04.1+esm83.5.2-2ubuntu0~16.04.13+esm203.6.9-1~18.04ubuntu1.13+esm73.7.5-2ubuntu1~18.04.2+esm83.8.0-3ubuntu1~18.04.2+esm73.8.10-0ubuntu1~20.04.18+esm33.9.5-3ubuntu0~20.04.1+esm7